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AMENDMENTS TO THE CLAIMS 
Pllase a nend the claims as indicated hereafter. 
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I opulating a database with element or system vulnerability information; 
( btaining keywords from profile or policy-descriptive information for the system; and 
i electing a database page to access from a database structure configured as a hierarchical 
plurality of database pages, each database page having a page index, data section 
and selector section, and utilizing keyword matching between the descriptive 
information and selector section to obtain vulnerability information for an element 
or combination of elements. 
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(Original) A method for providing information on system vulnerabilities, 



ng: 



(Original) The method of claim 1 , further comprising storing intermediate 
status information obtained from the selecting step in a state accumulator module, 

(Original) The method of claim 2, further comprising performing a check of 
accumulator module for intermediate result or status information. 



(Original) The method of claim 3, wherein the selecting step further 
cofuprisbs matching keywords utilizing result or status information stored in the state 
aciumii ator module. 
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(Original) The method of claim 4, further comprising sending the 
vu|neraljility information to a vulnerability accumulator module; 

retaining page selector information for database pages accessed; and 
updating inteimediate result or status information in the state accumulator 
module. 

< >• (Original) The method of claim 5, further comprising detecting a selection of 
inj ut ffc m a user, including profile or policy-descriptive system information provided by the 
us$r, to pontinue the obtaining keywords step and selecting step for same element, 

(Original) The method of claim 1, further comprising repeating the obtaining 
keJwor4s step and selecting step for another element or element combination. 



(Original) The method of claim 1, further comprising updating at least one of 
elemfcnt counter value, combination counter value, cycle counter value, or cumulative cycle 



yalue. 



! K (Original) The method of claim 5, further comprising updating the database 
wil|h an element counter value. 

0. (Original) The method of claim 9, further comprising updating the database 
wi h list of database pages or indices accessed to provide for accumulated vulnerability results 
fo| exarfuned element or system. 



1, (Original) The method of claim 10, further comprising presenting the 
ated vulnerability results to a user's processing device. 
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2 (Original) The method of claim 1 , further comprising filtering information on 
th4 elenjent or combination of elements prior to perfonnmg the obtaining keywords step. 



J . (Original) The method of claim 2, further comprising identifying and 
particular combinations of system elements to process based on vulnerability 
rmanon obtained from the database as well as on state information stored in the state 
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(Original) A computer-readable medium having a computer program for 
prtfvidirjg information on system vulnerabilities for performing the steps of: 

logic configured to populate a database with element or system vulnerability 
information; 

logic configured to query a database to obtain descriptive information for the 
system; 

logic configured to select a database page to access from a database structure 
configured as a hierarchical plurality of database pages, each database 
page having a page index, data section and selector section; and 
1 )gic configured to perform keyword matching between the descriptive information and 
selector section to obtain vulnerability information for an element or 
combination of elements. 



(Original) The computer-readable medium of claim 14, further comprising 
to store intermediate result or status information obtained from the select logic 
accumulator module. 
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6. (Original) The computer-readable medium of claim 15, further comprising 
configured to perform a check of a state accumulator module for intermediate result or 
in foimation. 



7. (Original) The computer-readable medium of claim 16, wherein the logic 
cofifigu^ed to select from a database page to access is further configured to match keywords 
iitifUzind result or status information stored in the state accumulator module. 
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8. (Original) The computer-readable medium of claim 17, further comprising 
ifigured to send the vulnerability information to a vulnerability accumulator module; 

logic configured to retain page selector information for database pages accessed; 
and 

logic configured to update intermediate result or status information in the state 
accumulator module. 

9. (Original) The computer-readable medium of claim 18, further comprising 
o ifigured to detect a selection of input from a user, including profile/pohcy-descriptive 

i [^formation provided by the user, to continue the performing of query logic and select 
same element. 



(Original) The computer-readable medium of claim 14, further comprising 
cohfigured to continue cycling by repeating the performing of query logic and select logic 
anotter element or element combination. 



1. 



(Original) The computer-readable medium of claim 14, further comprising 
logic co ifigured to update at least one of an element counter value, combination counter value, 
cy$le cojinter value, or cumulative cycle counter value. 
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2. (Original) The computer-readable medium of claim 18, further comprising 
lof ic co lfigured to update the database with at least one of an element counter value, 
co: nbin* tion counter value, cycle counter value, or cumulative cycle counter value, 

< 3. (Original) The computer-readable medium of claim 22, further comprising 
loi ic co lfigured to update the database with list of database pages or indices accessed to provide 
foi accu nulated vulnerability results for examined element or system. 

4. (Original) The computer-readable medium of claim 23, further comprising 
lojjic cojifigured to present the accumulated vulnerability results to a user's processing device. 

5 . (Original) The computer-readable medium of claim 1 4, further comprising 
loiic configured to filter information on the element or combination of elements prior to 
pef form ng the query logic. 
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(Original) A system for providing information on system vulnerabilities, 



a database populated with descriptive system information; 
a database structure configured as a hierarchical plurality of database pages, each 
database page further comprises a page index, data section and selector 
section, and wherein the data section is further configured to include the 
element vulnerability information and the selector section is further 
configured to include links to related database pages; and 
a rule processor module configured to provide rules for cycling through the 

database structure to match keywords provided by user input, including 
profile/pohcy-descriptive system information provided by the user, and the 
descriptive system information from the database with element 
vulnerability information from the database structure. 

7. (Original) The system of claim 26, further comprising an input parser/filter 
mddule >peratively coupled to the rule processor module, the input parser/filter module 
coftfigui ed to receive policy or profile input from a user's processing device and to convert the 
injfut intp data usable by the rule processor module. 

8. (Original) The system of claim 26, further comprising a state accumulator 
mcj(dule >peratively coupled to the rule processor module, the state accumulator module 
co jfigui sd to store intermediate vulnerability status or result information. 

9. (Original) The system of claim 26, further comprising a vulnerability 
ac<|umulator module operatively coupled to the rule processor module, the vulnerability 
accSumuljitor module configured to store identified vulnerability result information. 
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0. (Original) The system of claim 26, further comprising a presentation module 
opjbrativfely coupled to a user's processing device and the vulnerability accumulator module, the 
pre sents ion module configured to summarize and format accumulated vulnerability results for 
utilization by the user's processing device. 
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I (Original) The system of claim 26, further comprising a database interface 
>peratively coupled between the database, database structure, and the result accumulator 
the database interface module configured to enable provisioning and access to the 
and the database structure. 

2. (Original) The system of claim 26, wherein the database comprises an 
descriptive database (EDD). 



(Original) The system of claim 26, wherein the database structure comprises a 
chjcal vulnerability database (HVD) structure. 



4. (Original) The system of claim 28, wherein the rules processor module is 
fill her c configured to utilize accumulated state infonnation from the state accumulator module to 
mc dify t fie matching or filtering of keywords, such that a likelihood of success of a probability of 
matchin ; or filtering of keywords is changed based upon at least one of probabilistic, statistical, 
coAditio ml pre-requisite item, occurrence, situation, or rules information, 

2 5-39 (Cancelled). 
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